47.254.91.72

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
64 reports
46 reporters · latest 4 months ago
ISP
Alibaba Cloud - US
Usage Type
Data Center/Web Hosting/Transit
ASN
AS45102
Domain Name
alibabacloud.com
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

47.254.91.72 has been reported 64 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
64 from 46 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs identified 47.254.91.72 as a malicious indicator from threat intelligence.
DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇮🇳 Parth Maniar
This IP address carried out 6 SSH credential attack (attempts) on 04-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: http_proxy more details on http://threatbook.io/ip/47.254.91.72
SSH
🇺🇸 chronos
FTP Brute-Force Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 2222) Source port: 42166 TTL: 52 Packet length: 40 TOS: 0x08 This report (for 47.254.91.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 chronos
FTP Brute-Force Brute-Force
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 23 from 47.254.91.72
Port Scan
Anonymous
Brute-Force SSH
🇳🇱 donarev419
Connection to port 2222 with data transfer. Data preview: SSH-2.0-libssh2_1.11.1
Port Scan Hacking
🇵🇹 WebTejo
Detected multiple authentication failures and invalid user attempts from IP address 47.254.91.72 on [PT] Otter Node.
Brute-Force SSH
🇮🇳 Mr.Singh
NFT blocked 47.254.91.72 after 3 rejections on 04-May-2026.
Port Scan Brute-Force
🇺🇸 donarev419
Connection to port 2375 with data transfer. Data preview: GET /containers/json HTTP/1.1 Host: 198.23.197.89:2375 Upgrade-Insecure-Requests: 1 Accept: */*
Port Scan Hacking
🇺🇸 RAP
2026-05-04 02:59:26 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
Port Scan
🇺🇸 MPL
tcp/2222 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 204.242.176.133
🇲🇽 201.141.19.108
🇺🇸 184.105.247.247
🇬🇧 172.121.254.55
🇵🇰 154.208.50.77
🇬🇧 78.153.140.235
🇭🇰 34.92.51.89
🇳🇱 89.21.67.180
🇨🇿 46.135.52.232
🇳🇱 45.148.10.152
🇺🇸 199.165.159.106
🇹🇼 198.235.24.51
🇺🇸 193.163.101.57
🇧🇷 187.126.105.42
🇺🇸 142.111.152.117
🇪🇸 79.116.107.52
🇬🇪 62.3.30.10
🇺🇸 45.146.55.204
🇺🇸 45.136.27.182
feedback